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Amendments to the Claims 

The listing of claims will replace all prior versions, and listings of claims in the 
application. 

1 . (Currently Amended) A method of providing automated document retention for 
an electronic document comprising: 

(a) assigning a document retention policy to the electronic document, the 
document retention policy being derived from a periodic installment recurring 
cut-off retention schedule specifying respectiv e installm e nt cut-off periods, each 
of the respective installment periods cut-off period having a respective finite 
document retention duration associated therewith; and 

(b) cryptographically associating encrypting the electronic document based 
on the document retention policy with the el e ctronic document such that the 
electronic document can be cryptographically accessed only during finite 
retention durations . 

2. (Currently Amended) The method as recited in claim 1, further comprising: 

(e) cryptographically prev e nting access to the electronic document in 

accordance with the document retention policy when th e r e spectiv e docum e nt 
r e tention duration for th e electronic document has b ee n exceeded wherein the 
encrypting the electronic document comprises encrypting using cryptographic 
keys associated with particular cut-off periods and associated retention durations . 

3. (Currently Amended) The method as recited in claim 1, wherein [[:]] 

step (b) utilizes a cryptographic k e y to associat e the docum e nt r e tention 
policy, and 

th e docum e nt r e tention policy sp e cifi e s the resp e ctiv e document r e tention 

duration and the r e spective installment period encrypting the electronic document 
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comprises encrypting using a cryptographic key associated with each particular 

cut-off period and its associated retention duration . 

4. (Currently Amended) The method as recited in claim 3, wherein the document 
retention policy specifies the respective document retention duration that expires 
a predetermined period of time after a beginning of the its respective installment 
cut-off period. 

5. (Currently Amended) The method as recited in claim 3, wherein the each 
respective installment cut-off period corresponds to a maximum off-line period of 
a client. 

6. (Currently Amended) The method as recited in claim 1, wherein said associating 
encrypting comprises acquiring a cryptographic key from a server over a 
network, the cryptographic key being used to associat e encrypt the electronic 
document based on the document retention policy. 

7. (Currently Amended) The method as recited in claim 6, further comprising: 

(e) deactivating the cryptographic key when the respective document 
retention duration has expired, thereby preventing further access to the electronic 
document. 

8. (Currently Amended) The method as recited in claim 7, wherein: 

said associating encrypting operates to utiliz e uses a cryptographic key to 
associate encrypt the electronic document based on the document retention 
policy, and 

the document retention policy specifies the-respective document retention 
duration durations and th e resp e ctiv e installment p e riod cut-off periods . 

9. (Currently Amended) The method as recited in claim 8, wherein the document 
retention policy specifies the respective document retention duration that expires 
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a predetermined period of time after a beginning of the its respective installment 
cut-off period. 

10. (Currently Amended) A method of limiting access to an electronic document 
comprising: 

determining whether an installment a cut-off period for a first document 
retention key has elapsed; 

generating a next document retention key to be used to encrypt an the 
electronic document during a next installment cut-off period, the next document 
retention key having a finite document retention duration associated therewith; 
and 

notifying a client of the next document retention ke y, the electronic 
document being crvptographically accessible only during finite document 
retention durations using a cryptographic key associated with such durations . 

1 1 . (Currently Amended) The method as recited in claim 10, further comprising: 

deactivating th e prior document r e t e ntion key when the prior document 
ret e ntion a cryptographic key is to be deactivated according to a predetermined 
schedule . 

12. (Currently Amended) The method as recited in claim 11, wherein the document 
retention duration is a predetermined duration of time following a beginning of 
the next installment cut-off period. 

13. (Currently Amended) A method for restricting access to an electronic document, 
said method comprising: 

encrypting a data portion of an the electronic document using a document 
key to produce an encrypted data portion; 



Atty. Dkt. No. 2222.5490000 



-5- 

Reply to Office Action of November 13, 2008 



KENRICH et al 
Appl. No. 10/815,229 



using a retention access key to associate a document retention policy with 
the electronic document; 

encrypting the document key using the retention access key to produce an 
encrypted document key, the retention access key being usable for said 
encrypting during an installment a cut-off period of a periodic installment 
recurring cut-off retention schedule , the cut-off period having a finite document 
retention duration associated therewith ; 

forming a secured electronic document from at least the encrypted data 
portion and the encrypted document key; and 

storing the secured electronic document , the secured electronic document 
being crypto graphically accessible only during the finite document retention 
duration . 

14. (Previously Presented) The method as recited in claim 13, wherein the retention 
access key is a public retention access key. 

15. (Currently Amended) The method as recited in claim 13, wherein the document 
retention policy specifies a the document retention duration that expires a 
predetermined period of time after a beginning of th e installment its cut-off 
period. 

16. (Currently Amended) A method for accessing a secured electronic document, the 
secured electronic document having at least a header portion and a data portion, 
comprising: 

obtaining a retention access key, the retention access key being used to 
associate a r e sp e ctiv e finite document retention duration of a document retention 
policy having a cut-off period associated therewith with the electronic document, 
the retention access key being usable during the r e sp e ctiv e document retention 
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duration following a beginning of a respectiv e installment its respective cut-off 
period of a periodic installment recurring cut-off retention schedul e, the secured 
electronic document being crypto graphically accessible only during the finite 
document retention duration ; 

obtaining an encrypted document key from the header portion of the 
secured electronic document; 

decrypting the encrypted document key using the retention access key to 
produce a document key; and 

decrypting an encrypted data portion of the secured electronic document 
using the document key to produce a data portion. 

17. (Previously Presented) The method as recited in claim 16, wherein the retention 
access key is identified by an indicator within a header portion of the secured 
electronic document. 

18. (Previously Presented) The method as recited in claim 16, wherein the retention 
access key is a private retention access key. 

19. (Currently Amended) The method as recited in claim 16, wherein said obtaining 
obtains the retention access key being obtained from a server. 

20. (Currently Amended) The method as recited in claim 16, wherein the r es pectiv e 
document retention duration is a predetermined period of time following a 
beginning of the its respective installment cut-off period. 

21. (Currently Amended) A tangible computer readable computer-readable medium 
including at l e ast having stored thereon, computer program code computer- 
executable instructions that, for providing docum e nt r e t e ntion for an el e ctronic 
document, said computer readable medium if executed by a computing device, 
cause the computing device to perform a method comprising: 
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computer program cod e for assigning a document retention policy to the 
an electronic document, the document retention policy being derived from a 
periodic installment recurring cut-off retention schedule specifying cut-off 
periods, each cut-off period having a respective finite document retention 
duration associated therewith ; and 

computer program code for cryptographically associating encrypting the 
electronic document based on the document retention policy with the el e ctronic 
document such that the electronic document can be cryptographically accessed 
only during finite retention durations . 

22. (Currently Amended) The tangible comput e r — readabl e computer-readable 
medium as recited in claim 21, wherein said computer readable medium further 
comprises: 

computer program code for cryptographically prev e nting access to the 
e l e ctronic document in accordance with the document retention policy when a 
document ret e ntion duration for th e electronic docum e nt has been e xceeded the 
encrypting the electric document comprises using cryptographic keys associated 
with particular cut-off periods and associated retention durations . 

23. (Currently Amended) The tangible computer readable computer-readable 
medium as recited in claim 21, wherein 

said computer program code for cryptographically associating op e rat e s to 
utilize a cryptographic key to associat e th e document retention policy, and 

wherein th e docum e nt r e tention policy specifi e s a resp e ctive document 

r e t e ntion duration and a r e sp e ctiv e installm e nt period the encrypting the electric 
document comprises using a cryptographic key associated with particular cut-off 
period and its associated retention duration . 

24. (Currently Amended) The tangible comput e r readabl e computer-readable 
medium as recited in claim 23, wherein the document retention policy specifies 
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the respective document retention duration that expires a predetermined period of 
time after a beginning of the its respective installment cut-off period. 



25. (Currently Amended) A computer-implemented file security system for 
restricting access to an electronic file, comprising: 

a key stor e computer-readable storage medium that stores configured to 
store a plurality of cryptographic key pairs, each of the cryptographic key pairs 
including a public key and a private key, at least one of the cryptographic key 
pairs pertaining to a retention policy, the retention policy having a resp e ctive 
finite document retention duration durations and a resp e ctiv e installment , each 
finite document retention duration having a respective cut off period associated 
therewith ; and 

an access manager operatively conn e cted to said key stor e , said access 
manag e r configured control management module which if executed by a 
computing device of the computer-implemented file security system, causes the 
computing device to; 

make available provide , for each of th e respective installment 
particular cut-off periods period , a different one of the public keys of the at least 
one of the cryptographic key pairs, and 

te determine whether the private key of the at least one of the 
cryptographic key pairs pertaining to the retention policy is permitted to be 
provided to a requestor based on whether the its respective document retention 
duration following a beginning of the its respective installm e nt cut-off period has 
expired, 

wherein the requestor requires the private key of the at least one of the 
cryptographic key pairs pertaining to the retention policy to access a secured 
electronic file, and wherein the secured electronic file was previously secured 
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using the public key of the at least one of the cryptographic key pairs pertaining 
to the retention policy, and at the time the electronic file was so secured, the 
public key was within the its respective installment cut-off period and available 
for use , the secured electronic document being crypto graphically accessible only 
during the finite retention durations . 

26. (Previously Presented) The method as recited in claim 13, wherein access is 
restricted to the secured electronic document stored to a remote location. 
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